[StALUG] making sense of Tiger security warnings

[garryg]

Hey all,

Wondering if anyone can offer me an explanation re why i'm getting the
following warning when running the Tiger system audit? The specific
issue i have is that although the os i'm using is Ubuntu's Karmic 9.10
(installed using the alternate install cd), tiger reports the
following:

# Checking OS release...
--WARN-- [osv004w] Unreleased Debian GNU/Linux version `squeeze/sid'


The machine is running an unreleased version of Debian GNU/Linux.
This version is not supported by the security team so it might not
be up-to-date security wise (support is only provided for the latest
release). That is, "run at your own risk".
------------------------------------------------------------------------------------------------

I've loads of other warnings and alerts that may or may not suggest my
system has been compromised (can't make sense of false positives etc
as of yet) but this one in particular has me stumped. Any suggestions
at all?

Thanks in advance.

Garry.

[Jim McLaren]

On Sun, 26 Sep 2010 22:37:34 +0100

Post by garryg
Wondering if anyone can offer me an explanation re why i'm getting the
following warning when running the Tiger system audit? The specific
issue i have is that although the os i'm using is Ubuntu's Karmic 9.10
(installed using the alternate install cd), tiger reports the

Have you tried posting on Ubuntu forums? I can't really help, but
that's where I would start.

[John A Thomson]

Not being up to speed with Ubuntu, one thought crosses my mind, but it could
be wrong....

Is the version of Ubuntu you're using out of support? Perhaps an upgrade to
the latest release will cure the issues.


Many thanks and regards

John A Thomson

[garryg]

Hey Jim,

nah, haven't tried any of the ubuntu forums yet - will do though as
that tiger alert seems a strange one to me and has got my curiosity
going. Cheers.


Alright John,

nah again - i'm running ubuntu 9.10 karmic and it's bang up to date.
Not to worry - started registration for my OU course today (T155 -
Linux: An Introduction) and they recommend using ubuntu 8.04 for the
course work, so whether my system is compromised or not doesn't really
matter as it'll be getting wiped in the next 48 hours when i do a
fresh install.

Cheers guys.

Garry.



On 9/27/10, standrews-request at mailman.lug.org.uk

Send StAndrews mailing list submissions to
standrews at mailman.lug.org.uk
To subscribe or unsubscribe via the World Wide Web, visit
https://mailman.lug.org.uk/mailman/listinfo/standrews
or, via email, send a message with subject or body 'help' to
standrews-request at mailman.lug.org.uk
You can reach the person managing the list at
standrews-owner at mailman.lug.org.uk
When replying, please edit your Subject line so it is more specific
than "Re: Contents of StAndrews digest..."